5228 matches found
Citrix Session Recording deserialization vulnerability
Added: 08/27/2025 CVE: CVE-2024-8069 Background Citrix Session Recording is software for recording and archiving sessions for retrieval and playback. Problem Unsafe object deserialization in Citrix Session Recording could allow a remote attacker to execute arbitrary commands by sending a speciall...
Linux Distros Unpatched Vulnerability : CVE-2020-13578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial o...
ROS-20250822-21
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
ROS-20250822-23
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
ROS-20250822-24
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
USN-7648-2 php7.0, php7.2, php7.4 vulnerabilities
USN-7648-1 fixed several vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain hostnames containing null characters. A remote attacker...
Linux Distros Unpatched Vulnerability : CVE-2019-19791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LemonLDAP::NG aka lemonldap-ng before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints when some...
Linux Distros Unpatched Vulnerability : CVE-2023-3247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for...
Linux Distros Unpatched Vulnerability : CVE-2025-6491
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML...
Malicious code in soap-fetch-sociobiology-winston (npm)
The package soap-fetch-sociobiology-winston was found to contain malicious code...
Malicious code in auriga-soap-subscription-shelljs (npm)
The package auriga-soap-subscription-shelljs was found to contain malicious code...
Malicious code in soap-jsonp-registry-local (npm)
The package soap-jsonp-registry-local was found to contain malicious code...
Malicious code in css-loader-quito-soap-ursa (npm)
The package css-loader-quito-soap-ursa was found to contain malicious code...
MAL-2025-26257 Malicious code in meteor-yonder-soap-hermes (npm)
The package meteor-yonder-soap-hermes was found to contain malicious code...
MAL-2025-23613 Malicious code in janus-soap-lyra-cosmochemistry (npm)
The package janus-soap-lyra-cosmochemistry was found to contain malicious code...
Malicious code in soap-repository (npm)
The package soap-repository was found to contain malicious code...
MAL-2025-33575 Malicious code in soap-local-celeste-magellan (npm)
The package soap-local-celeste-magellan was found to contain malicious code...
Malicious code in package-jsonp-json-soap (npm)
The package package-jsonp-json-soap was found to contain malicious code...